{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:69278381-40e8-5f39-867b-56050bbea81e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1",
      "type": "library",
      "group": "org.apache.hadoop",
      "name": "hadoop-streaming",
      "version": "2.7.3.tuxcare.1",
      "purl": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:fd50bd37-e2d3-58ce-a0d6-af685981362a",
      "id": "CVE-2016-6811",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6811 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:337e212c-43f8-5f32-81b5-5b234bb9e0f4",
      "id": "CVE-2017-15713",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-15713 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:049d88ae-5cbc-5266-80cc-fdab8f059ec6",
      "id": "CVE-2017-15718",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-15718 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b09907c0-efd3-5c38-b18e-051982d14104",
      "id": "CVE-2017-3166",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3166 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0e4da3e-fddd-5a03-8303-06da1ec35374",
      "id": "CVE-2017-7669",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7669 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18870766-fc3d-5e78-9695-c21bf68484ae",
      "id": "CVE-2018-11765",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11765 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09199d07-3c83-5524-b861-9961123c1a27",
      "id": "CVE-2018-11766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11766 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce82d9df-9b0c-5591-a119-7dd97f0af271",
      "id": "CVE-2018-11768",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11768 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3aa3e72-b49e-5861-8e02-b166ee62013a",
      "id": "CVE-2018-1296",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1296 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0917aab9-752f-5563-8c37-598ecc938c9b",
      "id": "CVE-2018-8009",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8009 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:210c5d1f-f971-559a-bd97-b757cba15fdc",
      "id": "CVE-2018-8029",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8029 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eaf92acb-6afb-5a80-a1cc-5fa70796266d",
      "id": "CVE-2020-9492",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9492 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0581fd0-0c87-50db-a658-b1f93d3c7f21",
      "id": "CVE-2021-25642",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-25642 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3b457d0-29d7-5529-9f24-4d5dfbbee661",
      "id": "CVE-2021-33036",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-33036 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:761c6d41-b24d-5027-aa0e-0117d0349b41",
      "id": "CVE-2021-37404",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-37404 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c078adea-649f-594a-91a7-c43686336abc",
      "id": "CVE-2022-25168",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-25168 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4759239-d99a-5d4c-a5dc-5fada5081a20",
      "id": "CVE-2022-26612",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-26612 affects version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c64132fd-0ce3-5913-abfe-4fdebd79dab8",
      "id": "CVE-2024-23454",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-23454 is fixed in version 2.7.3.tuxcare.1 of org.apache.hadoop:hadoop-streaming."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.hadoop/hadoop-streaming@2.7.3.tuxcare.1"
    }
  ]
}